Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          DHY5tTkNCxqd2d1hVrtowlqYk6FNV1b43voG29O5tqA=
Subject key identifier:   76:88:B4:50:BE:FE:06:4E:B0:C0:BD:BF:11:F4:5E:B7:4A:F5:A2:46
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01962E2ADBBDEE64D3A996DA42096CEC6232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          154B
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          5: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=)
                          6: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=)
                          7: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: o4UHj7gXV1g/C8Eg+IP8lfmfxRxAElkR03zha9aZcs0=)
                          8: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=)
                          9: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          10: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          11: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=)
                          12: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          13: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=)
                          14: SfLzunSNfVE3jb-NulCQVQsuoCM.roa (hash: G79tyE5U2vanoxkN6vEyOepef/dA2Pb0suWRvxlA2eY=)
                          15: VH8QK20zoazrn9p_89zomLcULQg.roa (hash: pptS2UyRLo0076Ca5F8RsGdYwbB788fcM68VL9PGOQs=)
                          16: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          17: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          18: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          19: eKYivdThEYNqXTARb0-te2VE2kI.roa (hash: UvHTjONqnplM8Hb7ZC6ohM64r8xQixEce73idZxGGsw=)
                          20: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=)
                          21: o3FpZUaMCqS0PJ-p38gLRiireA8.roa (hash: 8+rSXVxhddmrUPWbbOUkGkf6mzc7L21bbQhqQDlDK6c=)
                          22: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          23: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          24: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          25: t7-lVymTI7BBAmfc0HyT7P4YiOk.roa (hash: 5liRD96jP/HBEKpzaeMEPIuWW26VUEfUx+5EWcBIeqI=)
                          26: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          27: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:db:bd:ee:64:d3:a9:96:da:42:09:6c:ec:62:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=7688b450befe064eb0c0bdbf11f45eb74af5a246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:a4:ff:cc:21:39:8f:c2:b7:76:70:b4:a0:
                    14:12:0b:db:42:41:5e:aa:38:29:db:5d:de:07:03:
                    70:48:5e:1d:b9:a6:31:c5:e9:3c:0d:50:f5:18:45:
                    a6:5b:5e:23:a7:70:b5:63:63:9c:81:52:94:f8:56:
                    3f:75:95:c0:cb:de:8a:39:14:2a:5a:11:7f:63:c2:
                    3d:8d:f2:c9:ed:ce:16:d0:99:11:70:ac:cb:27:fb:
                    f4:1e:62:c3:d4:79:b5:a9:60:a4:bd:a0:4f:79:c0:
                    a3:73:2e:32:94:a3:dd:6f:66:b5:18:cc:2e:6e:c4:
                    d6:1a:6a:02:7e:61:fc:06:88:28:c1:e6:a4:c9:97:
                    c1:7d:5a:54:c2:79:90:34:04:80:8b:95:a2:93:80:
                    80:5c:df:d9:81:64:2c:f5:11:49:c8:8d:69:bd:9d:
                    0e:96:24:3f:6f:85:6a:20:84:0c:01:85:3f:d1:99:
                    12:4e:fe:c9:73:64:32:9e:c8:6e:3b:b0:31:68:42:
                    94:5c:da:42:84:6b:ff:43:6c:1a:e4:0b:5e:3f:90:
                    91:04:f0:6a:b7:d7:26:c6:44:d2:8c:f4:13:4c:61:
                    22:80:61:1c:2e:84:9c:5f:a8:2f:14:86:64:3a:75:
                    66:80:69:16:7c:91:78:69:f1:c0:99:a2:e4:eb:f7:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:B4:50:BE:FE:06:4E:B0:C0:BD:BF:11:F4:5E:B7:4A:F5:A2:46
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:14:70:e3:1b:fa:15:fa:06:69:32:3e:ee:44:12:4d:14:ae:
         67:03:97:ef:10:ad:ec:af:e1:85:f5:e2:6c:a7:53:e0:45:56:
         74:ec:4c:6b:0f:b7:c3:9e:98:ff:25:a8:a0:6b:96:e8:ef:db:
         b8:fe:ab:61:72:16:c3:0c:cb:e4:31:4d:2d:1f:25:a0:fb:ba:
         5d:d6:fb:c8:10:0f:62:71:c7:d4:a1:a9:4b:50:a9:33:f4:ed:
         7d:b5:e7:05:ad:89:9b:ea:57:e7:29:22:d8:be:c6:a5:2c:30:
         f6:3c:21:af:17:77:ec:51:d6:12:da:d4:44:5b:7b:ab:5a:4d:
         36:64:44:3d:d7:41:e9:ff:51:be:73:41:dd:b4:9b:f7:87:6f:
         bd:8e:24:c4:d8:9e:2f:ed:67:ff:c8:1a:a6:df:6f:13:44:73:
         00:9f:3b:6c:7a:90:01:21:7c:bf:d1:67:c3:5c:38:05:8b:91:
         fa:2b:6f:54:4f:43:ef:ef:8f:be:4d:ca:25:77:f8:23:70:18:
         66:36:d1:5a:99:a2:ed:cc:e1:63:5f:e4:fe:f5:6f:9a:e4:99:
         b4:54:3c:4c:ea:42:7d:44:23:62:01:69:0d:db:6c:60:a4:88:
         c0:d5:13:f6:f6:ef:c0:54:a1:d5:95:24:85:4c:97:19:9f:03:
         e5:ee:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----